t-reqs

T-Reqs HTTP Fuzzer T-Reqs（T wo Req uests ）は、論文「T-Reqs: HTTP Request Smuggling with Differential Fuzzing」の一部として書かれた文法ベースのHTTPファザーであり、この論文はACM CCS 2021で発表されました。 BibTeX of the paper: @inproceedingsccs2021treqs, title=T-Reqs: HTTP Request Smuggling with Differential Fuzzing, author=Jabiyev, Bahruz an...

roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...

OpenSSL-CCS-Inject-Test

OpenSSL CCS 注入测试 此脚本旨在检测广泛配置中的易受攻击服务器（CVE-2014-0224）。它尝试使用每个受影响的协议版本（SSLv3、TLSv1、TLSv1.1 和 TLSv1.2）进行协商，并通告一套全面的密码套件。 变更： v0.1 - 更新了接收缓冲区大小以应对更长的证书消息。 v0.2 - 更新了记录处理，以识别当关闭警报与另一个 TLS 记录在同一段中时的处理。 v0.3 - 修改了措辞以澄清工具输出，并更新了逻辑以正确识别标准 RFC2246 之外的会话终止。 此离线工具不受支持，仅供参考。 此工具使用 Python –...

A2SV--SSL-VUL-Scan

A2SV--SSL-VUL-Scan A2SV = 自动扫描 SSL 漏洞：HeartBleed、CCS Injection、SSLv3 POODLE、FREAK... 等 支持漏洞： CVE-2007-1858 Anonymous Cipher CVE-2012-4929 CRIMESPDY CVE-2014-0160 CCS Injection CVE-2014-0224 HeartBleed CVE-2014-3566 SSLv3 POODLE CVE-2015-0204 FREAK Attack CVE-2015-4000 LOGJAM Attack CVE-2016-0800...

resym

ReSym 工件 本仓库提供了论文 "ReSym: 利用 LLM 从剥离后的二进制文件中恢复变量和数据结构符号"（CCS 2024）的工件。 🏆 ACM SIGSAC 杰出论文奖得主 注意 ：我们正在积极维护/更新我们的工件。请确保您使用的是最新版本。 提供的数据和资源 数据准备脚本 ：位于 processdata 文件夹中。它生成带有真实符号信息的训练数据。该脚本是一键式的，文件夹中提供了使用说明。 二进制文件和反编译代码 ：可在 Zenodo（ReSymrawdata）上获取。这包括我们在本项目中使用过的原始二进制文件和相应的反编译代码： bin/：包含带有调试信息的原始未剥离二进制...

a2sv

1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE - CVE-2015-0204 FREAK Attack...

openssl-ccs-cve-2014-0224

La herramienta de Adam Langley para probar OpenSSL CVE-2014-0224, publicada originalmente aquí: https://www.imperialviolet.org/2014/06/05/earlyccs.html Para compilar la herramienta: $ export GOPATH=$pwd $ go build openssl-ccs-cve-2014-0224.go Probado con go 1.2.2 y 1.3. El directorio src/my-tls...

CVE-2014-0224

OpenSSL CVE-2014-0224 中间人攻击利用演示。 作者：@bluerust 博客：http://hi.baidu.com/bluerust/item/bf2ab031bbadcf09cfb9fe41 版本：1.1 描述： 仅适用于 OpenSSL 1.0.1，仅测试了 RC4-SHA 加密套件。 a. 服务器 openssl sserver -debug -accept 443 -cert server.crt -certform PEM -key server.key -cipher RC4-SHA 此处不讨论如何生成证书。 b. 客户端 openssl sclient...

Rocky Linux 8 [CIQ] Security Update: nspr / nspr-debuginfo / nspr-debugsource / nspr-devel / nss / etc (crlsa-2021_3572)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20213572 advisory. nss: TLS 1.3 CCS flood remote DoS Attack CVE-2020-25648 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

CentOS Linux 6 [TuxCare] Security Update: nss / nss-devel / nss-pkcs11-devel / nss-sysinit / nss-tools (CENTOS6:CLSA-2025:1760112150)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1760112150 advisory. - A flaw was found in the way NSS handled CCS ChangeCipherSpec messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS...

ccs-eval

评估主机是否存在CVE-2014-0224漏洞 https://vulners.com/cve/CVE-2014-0224 用法： ccs-eval.py list-of-hosts.txt 接受一个主机列表文件，每行一个主机。使用nmap检查常见SSL端口。执行RedHat提供的PoC注入测试（fake-client-early-ccs.pl）。将结果写入"local-results-list-of-hosts.txt"...

CVE-2026-97620

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...

OESA-2026-3921 glibc security update

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...

Security update for glibc

This update for glibc fixes the following issues: CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723. CVE-2026-18374: heap buffer overflow in the fopen ccs extension bsc1277262. CVE-2026-19499: buffer overflo...

DEBIAN-CVE-2026-90047

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't hand out the flat CCS storage as usable VRAM getflatccsoffset reads the base of the flat CCS storage from the hardware, scales it by the number of enabled L3 nodes, and rounds the result up to 128K. Everything below...

CVE-2026-90047

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't hand out the flat CCS storage as usable VRAM getflatccsoffset reads the base of the flat CCS storage from the hardware, scales it by the number of enabled L3 nodes, and rounds the result up to 128K. Everything below...

CVE-2026-90047 drm/xe: Don't hand out the flat CCS storage as usable VRAM

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't hand out the flat CCS storage as usable VRAM getflatccsoffset reads the base of the flat CCS storage from the hardware, scales it by the number of enabled L3 nodes, and rounds the result up to 128K. Everything below...

CVE-2026-90047 drm/xe: Don't hand out the flat CCS storage as usable VRAM

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't hand out the flat CCS storage as usable VRAM getflatccsoffset reads the base of the flat CCS storage from the hardware, scales it by the number of enabled L3 nodes, and rounds the result up to 128K. Everything below...

EUVD-2026-80655

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't hand out the flat CCS storage as usable VRAM getflatccsoffset reads the base of the flat CCS storage from the hardware, scales it by the number of enabled L3 nodes, and rounds the result up to 128K. Everything below...

CVE-2026-90047

This vulnerability affects the Linux kernel's drm/xe driver (Intel Xe GPU driver). The get_flat_ccs_offset() function incorrectly rounds up the flat CCS (Compressed Caching System) storage boundary to 128 KiB instead of rounding down to the allocator's page size, exposing a small region of memory...